Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer
File: aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer (raw, json)
Hash identifier: pmmbqfALJp3nh6RI39u3uDDYQZVcZBgQY/9M1H7kJWU=
Subject key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 60A8
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 10 Jan 2025 05:23:08 +0000
Certificate not after: Mon 01 Dec 2025 00:00:00 +0000
Subordinate resources: IP: 146.88.200.0/23
IP: 167.179.20.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24744 (0x60a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Jan 10 05:23:08 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=A911CA82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b2:fb:25:38:4f:d3:44:8f:ef:1d:f5:1d:79:
54:d5:54:55:2c:aa:30:17:98:93:20:5f:21:c1:79:
f1:c6:5d:58:19:f9:32:e4:d9:bd:a7:10:51:fb:2c:
c5:0a:90:19:d1:89:e3:d7:10:e5:87:ed:d2:26:94:
03:88:93:16:21:25:71:ad:8d:0f:ea:1b:cb:21:e9:
25:47:33:9d:10:c2:ef:65:fd:7b:06:00:2d:4a:42:
9b:9d:4e:1e:6b:d6:81:28:0c:29:59:31:e8:bd:01:
52:b1:9f:b6:e1:5c:0d:7f:3e:09:0e:db:9e:9c:6d:
ae:15:89:d1:64:5a:1e:51:ab:cc:51:96:87:74:00:
a1:9e:e7:3c:12:54:74:5e:4d:bb:df:e2:3e:42:77:
e2:da:e5:23:47:76:49:5d:6b:9f:50:99:bf:bc:16:
ff:d7:40:5a:92:e7:81:14:88:0b:41:59:d6:3b:ec:
6d:07:e7:3c:fb:5e:f7:42:7f:46:87:a7:da:e9:0f:
7e:76:92:30:c1:90:42:4d:74:88:aa:de:b8:ca:c0:
ad:29:37:07:e8:bc:ad:bf:50:56:03:e1:e0:ed:e8:
47:fb:20:74:d1:9f:dc:a9:90:ae:5f:bc:ca:88:76:
18:e8:52:73:02:a0:5b:23:f8:50:a6:9b:2f:5b:15:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.88.200.0/23
167.179.20.0/23
Signature Algorithm: sha256WithRSAEncryption
66:5a:73:65:db:88:bf:8f:77:bb:c1:09:16:66:e7:0b:fd:14:
77:1c:33:0a:03:0a:79:1f:a6:5f:7a:6a:ee:de:40:0f:dc:ee:
d0:80:57:3f:2c:52:9f:e8:8a:08:3b:bd:05:b9:df:91:3e:c4:
10:5b:bf:32:4c:65:38:5e:01:3a:c3:a9:f0:7c:3d:b2:9b:a1:
68:a3:40:dd:1b:2f:92:01:5b:48:22:94:8b:f4:b8:24:b2:e0:
64:95:6c:54:1c:09:0e:89:20:1b:dc:f7:0c:5f:da:81:82:41:
43:ed:0c:b4:48:ad:71:69:22:30:1e:64:0f:e6:5b:8e:4b:43:
18:03:8d:8f:cc:a7:43:1d:2c:ac:c9:20:48:5a:9d:fa:27:0c:
09:f2:ef:2c:c3:fd:4c:76:29:1e:a2:5c:e4:c1:bb:92:1a:bd:
30:b4:22:ef:01:cf:5d:ac:99:f4:87:8e:c3:ba:71:af:65:65:
44:de:c7:8e:c7:d9:99:9a:74:a6:94:8e:2e:7e:ec:84:03:d0:
14:42:62:35:9d:27:5d:07:da:1b:61:34:cb:29:18:d8:91:af:
6b:f9:4d:ed:f0:02:e3:a1:39:a1:85:4f:af:61:6c:3c:65:d9:
99:25:59:2e:df:91:85:cc:67:2a:71:bc:3c:4e:a3:34:36:85:
3f:e0:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:49:35 2025 by rpki-client